How it works: port 443 and public addresses only, no more than two requests to your site, 5 seconds each. You can check up to 5 sites in 10 minutes. The domain is kept for 10 minutes so a repeat check does not hit the site again. Your IP is kept for an hour, only as a one-way hash, for the rate limit. What it looks like for this site — Audit.
ogurexxx@root:~$ ./audit.sh your-site.com
Check your website
The same checks this site runs on itself on the Audit page — for yours. The server connects to the site once over HTTPS and looks at what it answers. Nothing is attacked, and nothing is kept for longer than 10 minutes.